1
"unlimited ammo"
Auto Assembler Script
define(address,"Incubation.exe"+6C30B)
define(bytes,2A C2 88 46 3D)
[ENABLE]
assert(address,bytes)
address:
nop
nop
[DISABLE]
address:
db bytes
// sub al,dl
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Incubation.exe.text+6B30B
Incubation.exe.text+6B2E9: 8B C8 - mov ecx,eax
Incubation.exe.text+6B2EB: C1 E1 05 - shl ecx,05
Incubation.exe.text+6B2EE: 03 C8 - add ecx,eax
Incubation.exe.text+6B2F0: 8D 04 48 - lea eax,[eax+ecx*2]
Incubation.exe.text+6B2F3: 80 B8 F9 B2 51 00 FF - cmp byte ptr [eax+Incubation.exe+11B2F9],-01
Incubation.exe.text+6B2FA: 74 14 - je Incubation.exe.text+6B310
Incubation.exe.text+6B2FC: 80 7E 4C 42 - cmp byte ptr [esi+4C],42
Incubation.exe.text+6B300: 74 0E - je Incubation.exe.text+6B310
Incubation.exe.text+6B302: 8A 90 01 B3 51 00 - mov dl,[eax+Incubation.exe+11B301]
Incubation.exe.text+6B308: 8A 46 3D - mov al,[esi+3D]
// ---------- INJECTING HERE ----------
Incubation.exe.text+6B30B: 2A C2 - sub al,dl
// ---------- DONE INJECTING ----------
Incubation.exe.text+6B30D: 88 46 3D - mov [esi+3D],al
Incubation.exe.text+6B310: 8B 84 24 84 00 00 00 - mov eax,[esp+00000084]
Incubation.exe.text+6B317: 85 C0 - test eax,eax
Incubation.exe.text+6B319: 75 12 - jne Incubation.exe.text+6B32D
Incubation.exe.text+6B31B: 8B 44 24 54 - mov eax,[esp+54]
Incubation.exe.text+6B31F: 6A 01 - push 01
Incubation.exe.text+6B321: 50 - push eax
Incubation.exe.text+6B322: 6A 00 - push 00
Incubation.exe.text+6B324: 56 - push esi
Incubation.exe.text+6B325: E8 B6 34 00 00 - call Incubation.exe.text+6E7E0
}
8
"Invulnerability"
Auto Assembler Script
define(address,"Incubation.exe"+6CB9D)
define(bytes,2A C1 88 47 16)
define(address2,"Incubation.exe"+6CC51)
define(bytes2,2A C1 88 47 16)
[ENABLE]
assert(address,bytes)
assert(address2,bytes2)
address:
nop
nop
address2:
nop
nop
[DISABLE]
address:
db bytes
address2:
db bytes2
dealloc(newmem)
{
// ORIGINAL CODE - INJECTION POINT: Incubation.exe.text+6BB9D
Incubation.exe.text+6BB7E: 8D 04 40 - lea eax,[eax+eax*2]
Incubation.exe.text+6BB81: 99 - cdq
Incubation.exe.text+6BB82: 83 E2 03 - and edx,03
Incubation.exe.text+6BB85: 03 C2 - add eax,edx
Incubation.exe.text+6BB87: C1 F8 02 - sar eax,02
Incubation.exe.text+6BB8A: 88 44 24 10 - mov [esp+10],al
Incubation.exe.text+6BB8E: 8A 47 16 - mov al,[edi+16]
Incubation.exe.text+6BB91: 8A 4C 24 10 - mov cl,[esp+10]
Incubation.exe.text+6BB95: 3A C1 - cmp al,cl
Incubation.exe.text+6BB97: 0F 86 C8 00 00 00 - jbe Incubation.exe.text+6BC65
// ---------- INJECTING HERE ----------
Incubation.exe.text+6BB9D: 2A C1 - sub al,cl
// ---------- DONE INJECTING ----------
Incubation.exe.text+6BB9F: 88 47 16 - mov [edi+16],al
Incubation.exe.text+6BBA2: 8B 44 24 1C - mov eax,[esp+1C]
Incubation.exe.text+6BBA6: 88 08 - mov [eax],cl
Incubation.exe.text+6BBA8: B8 01 00 00 00 - mov eax,00000001
Incubation.exe.text+6BBAD: 5F - pop edi
Incubation.exe.text+6BBAE: 5E - pop esi
Incubation.exe.text+6BBAF: 5B - pop ebx
Incubation.exe.text+6BBB0: C3 - ret
Incubation.exe.text+6BBB1: 8A 4F 37 - mov cl,[edi+37]
Incubation.exe.text+6BBB4: 32 C0 - xor al,al
}
21
"Money for buying upgrades"
0
2 Bytes
Incubation.exe+109EEC
24
"Bratt"
0
1
"Incubation.exe"+0010EBA0
222
27
"Name"
0
String
10
0
0
1
+0
16
"Health"
0
Byte
+16
17
"Ammo"
0
Byte
+3d
20
"Experience"
0
Byte
+18
31
"West"
0
1
"Incubation.exe"+0010EBA0
333
33
"Name"
0
String
10
0
0
1
+0
34
"Health"
0
Byte
+16
35
"Ammo"
0
Byte
+3d
36
"Experience"
0
Byte
+18
38
"Maxon"
0
String
0
0
0
1
"Incubation.exe"+0010EBA0
3E9
40
"Name"
0
String
10
0
0
1
+0
41
"Health"
0
Byte
+16
42
"Ammo"
0
Byte
+3d
43
"Experience"
0
Byte
+18
29
"Backup Pointers to..."
C0C0C0
1
26
"Bratt"
String
0
0
0
1
"Incubation.exe"+001229C4
220
32
"West"
0
String
0
0
0
1
"Incubation.exe"+001229C4
331
39
"Maxon"
String
0
0
0
1
"Incubation.exe"+001229C4
3E4
Code :mov cl,[edx+ecx*2+16]
Incubation.exe+77B41
0C
C9
8D
04
4A
8A
4C
4A
16
84
C9
75
1E
68
Read Name of selected char
Incubation.exe+39CD3
1C
33
DB
85
C0
8A
06
0F
94
C3
84
C0